httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Behlendorf <br...@organic.com>
Subject Re: Finish 1.2!
Date Sat, 11 Jan 1997 20:16:10 GMT
On Sat, 11 Jan 1997, Randy Terbush wrote:
> I would be against our forcing an OS which has snprintf() into using
> ours.

We're not talking about much code here, not nearly as much as regex, and there
aren't speed/efficiency considerations as there are with regex.  It's more
secure to validate the code once than rely upon variable implementations -
didn't someone say BSD's was insecure?

My vote would be to put it in and make it the only one used, i.e. ap_snprintf.

	Brian

--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
brian@organic.com  www.apache.org  hyperreal.com  http://www.organic.com/JOBS


Mime
View raw message